github/dootask
1
0
Fork 0
mirror of https://github.com/kuaifan/dootask.git synced 2026-10-29 22:10:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(app): APK 签名指纹校验兼容新版 apksigner 输出格式

Browse Source
This commit is contained in:
kuaifan 2026-10-20 11:17:24 +00:00
parent a9a655afda
commit 734642b817
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
.github/workflows/app-build.yml vendored
View File

@ -191,7 +191,10 @@ jobs:
apksigner=$(ls "$ANDROID_HOME"/build-tools/*/apksigner | sort -V | tail -1)
"$apksigner" verify "$apk"
if [ "$MODE" = release ]; then
actual=$("$apksigner" verify --print-certs "$apk" | sed -n 's/^Signer #1 certificate SHA-256 digest: //p' | head -1)
# 新版 apksigner 的行首可能是 "Signer #1" 或 "Signer (minSdkVersion=…)"，只按字段名匹配
certs=$("$apksigner" verify --print-certs "$apk")
echo "$certs" | grep -i 'certificate SHA-256 digest' || true
actual=$(echo "$certs" | grep -i -m1 'certificate SHA-256 digest:' | sed 's/.*: *//' | tr -d ': ' | tr 'A-F' 'a-f')
expected=$(echo "$ANDROID_CERT_SHA256" | tr -d ':' | tr 'A-F' 'a-f')
if [ "$actual" != "$expected" ]; then
echo "::error::APK 签名证书与正式包不一致（$actual），无法覆盖升级"